FEDORA-2016-b49aaf2c56 — security update for qemu

stable

qemu-2.4.1-7.fc23

FEDORA-2016-b49aaf2c56 created by crobinso 8 years ago for Fedora 23

CVE-2015-8619: Fix sendkey out of bounds (bz #1292757)
CVE-2016-1981: infinite loop in e1000 (bz #1299995)
Fix Out-of-bounds read in usb-ehci (bz #1300234, bz #1299455)
CVE-2016-2197: ahci: null pointer dereference (bz #1302952)
Fix gdbstub for VSX registers for ppc64 (bz #1304377)
Fix qemu-img vmdk images to work with VMware (bz #1299185)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-b49aaf2c56

This update has been submitted for testing by crobinso.

8 years ago

This update has been pushed to testing.

8 years ago

mhayden commented & provided feedback 8 years ago

karma

Works for me.

cserpentis commented & provided feedback 8 years ago

karma

works for me with fedora and centos guests

This update has been submitted for stable by bodhi.

8 years ago

filiperosset commented & provided feedback 8 years ago

karma

no regressions noted

dfateyev commented & provided feedback 8 years ago

karma

Works for me.

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

qemu-2.4.1-7.fc23

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1283926 CVE-2015-8619 Qemu: hmp: stack based OOB write in hmp_sendkey routine

BZ#1292757 CVE-2015-8619 qemu: Stack-based buffer overflow in hmp_sendkey() [fedora-all]

BZ#1298570 CVE-2016-1981 Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines

BZ#1299455 Qemu: usb ehci out-of-bounds read in ehci_process_itd

BZ#1299995 CVE-2016-1981 qemu: qemu-kvm: Infinite loop and out-of-bounds transfer start in start_xmit() and e1000_receive_iov() [fedora-all]

BZ#1300234 qemu: Out-of-bounds read in usb-echi [fedora-all]

BZ#1302057 CVE-2016-2197 Qemu: ide: ahci null pointer dereference when using FIS CLB engines

BZ#1302952 CVE-2016-2197 qemu: Null pointer dereference in ahci [fedora-all]

BZ#1304377 Fedora - QEMU gdbserver cannot access VSX registers

qemu-2.4.1-7.fc23

Automated Test Results

None